Digital Arsenal
Flatbuffers

Binary serialization with field-level encryption, HD wallet derivation, and streaming dispatch

Field-Level Encryption for FlatBuffers

AES-256 encryption with HD wallet key derivation, meeting federal data-at-rest requirements

Capabilities

Field-Level Encryption

Encrypt individual fields within FlatBuffer records. The binary structure stays intact so upstream code can read encrypted values without schema changes.

HD Wallet Key Derivation

Keys derived from BIP-39 seed phrases using HKDF-SHA256. Each field can have its own derived key for granular access control.

High Performance

Generate and encrypt 1 million records at 50+ MB/s using WebAssembly. Streaming export avoids memory accumulation.

Zero Server Dependency

All cryptographic operations run client-side in the browser. No data leaves your device unless you explicitly export it.

Cryptographic Implementation

Symmetric Encryption AES-256-CTR
Key Derivation HKDF-SHA256
Key Exchange X25519 ECDH (Curve25519)
Digital Signatures Ed25519
HD Wallet BIP-39 / BIP-32 / BIP-44
Runtime WebAssembly (Crypto++)

FIPS 140-3 Validated Runtime

An optional OpenSSL 3.0.9 FIPS Provider runtime is available for environments requiring FIPS 140-3 validated cryptography.

OpenSSL 3.0.9 FIPS Provider

Certificate #4282. Compiled from source to WebAssembly using Emscripten. No third-party WASM ports.

FIPS-Approved Algorithms

P-256 ECDH (replaces X25519), AES-256-GCM/CTR, HKDF-SHA256, SHA-256. All operations through EVP API.

Build from Source

Single build.sh script downloads OpenSSL, configures for WASM, and produces drop-in replacement module.

API Compatible

Same JavaScript API as the default Crypto++ runtime. Switch runtimes without code changes.

The FIPS runtime is available on the fips-validated-runtime branch. See wasm/openssl-fips/ for build instructions and test suite.

Use Cases

Defense & Intelligence

Field-level encryption for mission data with per-user key derivation and need-to-know access control.

Healthcare (HIPAA)

Encrypt PHI fields while leaving non-sensitive metadata readable for indexing and routing.

Financial Services

Protect PII and transaction data at rest with audit-ready key management from HD wallets.

Zero-Trust Architectures

Data remains encrypted until the authorized recipient decrypts with their derived key.

Public Key Infrastructure

Alice encrypts data with Bob's public key. Only Bob can decrypt with his private key.

Field-Level Encryption

Generate FlatBuffer records and visualize individual field encryption using Alice/Bob keys

Bulk Generation

Generate up to 1 million FlatBuffer records - encrypted or plain

Export to File (Memory Efficient)

Generate records and download directly - no memory accumulation.

Import from File

Upload an .efbs file to decrypt and verify records.

No file selected

Generate in Memory (Small Datasets)

Generate records in memory for inspection. Best for <10,000 records.

Schema Viewer

View FlatBuffers schema (.fbs) and equivalent JSON Schema

.fbs Schema


          

JSON Schema


          

Convert JSON ↔ FlatBuffer

JSON Input
Hex Input (FlatBuffer)

Streaming Dispatcher

Route mixed FlatBuffer messages to ring buffers by type

Monster (MONS)
0 / 1000 Total: 0
Weapon (WEAP)
0 / 500 Total: 0
Galaxy (GALX)
0 / 200 Total: 0

Cryptographic Identity

Generate a vCard with your public keys for secure sharing

Loading WASM modules...